TechSupportScam

TechSupportScam — connector documentation

• MCP endpoint: https://techsupportscam.connectorbay.com/mcp
• REST API: POST https://techsupportscam.connectorbay.com/v1/tools/{tool_name}, described by the OpenAPI 3.1 spec at https://techsupportscam.connectorbay.com/openapi.json
• Transport: Streamable HTTP, stateless, MCP specification 2025-06-18 or later
• Authentication: none required. An optional Authorization: Bearer <key> raises rate limits.
• Health: https://techsupportscam.connectorbay.com/health · Tool schemas: https://techsupportscam.connectorbay.com/tools.json
• Publisher: Unify Dynamics LLC · connectorbay.com/techsupportscam · agent@connectorbay.com

What TechSupportScam is for

A scary popup claims your computer is infected, or someone calls claiming to be from Microsoft — and you need to know, right now, whether this is the real thing or a well-documented scam pattern. TechSupportScam answers that from a hand-curated reference of exactly how this scam unfolds, stage by stage.

TechSupportScam never scans a device, inspects a file, or assesses whether a computer is actually infected. It describes widely reported scam tactics so you can recognize the pattern yourself.

What it does

anatomy_of_a_tech_support_scam walks through the full five-stage pattern in order: a fake virus popup or warning, contact with a fake support agent, a remote-access request, staged fake "proof" of infection using normal system tools like Event Viewer or Task Manager, and a payment demand — each stage with real red flags. get_scam_stage returns detail on just one stage by name or number (1-5). legitimate_companies_never_list is a reference list of things a real tech company or support line will never do: cold-call about a virus, ask for gift cards, ask you to keep a screen-share session secret, demand wire or crypto payment, or ask for your banking password. recovery_checklist_if_scammed covers what to do if you already went through this: disconnect, uninstall the remote-access software, run a real antivirus scan, change passwords, contact your bank if payment was made, and report to the FTC/IC3.

Every stage and red flag was checked against widely published public consumer-fraud guidance from the Federal Trade Commission (FTC), Microsoft's own scam-awareness pages, and the AARP Fraud Watch Network.

What it is not

TechSupportScam is not a device-scanning or security tool — it never inspects your actual computer, its processes, its network connections, or any file, and it cannot tell you whether your device is really infected. It is not a fraud-investigation or law-enforcement tool — it describes a widely reported pattern for recognition, not a determination about any specific call or company you encountered. And it is never a substitute for hanging up and verifying independently — if you're unsure whether a support contact is real, hang up and contact the company yourself through a number or channel you already trust.

Tools

Anatomy

anatomy_of_a_tech_support_scam — The full five-stage anatomy in order, each with real red flags.

get_scam_stage — Detail on one stage by name or number (1-5). Args: stage.

Reference

legitimate_companies_never_list — Things a real tech company or support line will never do.

Recovery

recovery_checklist_if_scammed — What to do if you already went through a tech-support scam.

Conventions

• Read-only. Every tool reads bundled reference data; nothing is written anywhere and nothing about the user is stored.
• Result envelope. ok: true with data, or ok: false with a structured error (bad_input).
• Rate limits. Free tier 60 tool calls/minute and 300/day per user (keyed on the user identifier supplied by the host agent, else client IP); Pro keys raise this. Over-limit calls return HTTP 429 with Retry-After. initialize and tools/list are never counted.

Support

agent@connectorbay.com · connectorbay.com/techsupportscam/support

TechSupportScam — Privacy Policy

Effective 28 September 2026. Unify Dynamics LLC ("we", "us"), Menlo Park, California.

What TechSupportScam is. TechSupportScam is a connector (an MCP server and REST API) that AI assistants and personal agents call on your behalf for tech-support-scam pattern education. You interact with your assistant; the assistant sends us only the arguments needed for that one lookup.

TechSupportScam never scans a device, inspects a file, or connects to anything on your computer. It has no capability to do so — there is no upstream call in this connector at all, and no tool accepts a file, device identifier, IP address of your machine, or any technical detail about your actual computer.

What we receive. The arguments of each tool call — for example, a stage name or number — the technical headers needed to serve the request (an IP address or a client identifier supplied by the assistant, and a Pro API key if you have one), and standard server logs.

Everything is answered from a bundled reference file, and nothing is stored. No request is forwarded to any third party, no query is logged in request bodies, recorded, or used to train anything, and each request is answered independently with nothing carried over between requests.

What we do not receive or store. We do not receive your conversation with the assistant, your name, any detail about your actual computer or device, or a description of an actual incident beyond the single stage name or number used for that one request. Rate-limit counters (a client identifier and timestamps) are held in memory for at most 24 hours. Hosting-provider access logs, which contain IP addresses and request paths but not request bodies, are retained for up to 30 days for security and abuse prevention.

Sub-processors. None — the entire dataset is bundled with the server and every response is computed locally. Hosting: Vercel (United States regions).

Legal bases and your rights. Our processing is necessary to provide the service you request through your assistant. Because we store no personal data beyond short-lived logs, requests to access, correct, or delete personal data are usually satisfied automatically; you can still contact agent@connectorbay.com and we will respond within 30 days. We do not sell or share personal information and do not use your data to train models.

Not a fraud-reporting or law-enforcement channel. If you were the victim of a tech-support scam, report it to the FTC at reportfraud.ftc.gov and, for significant losses, to the FBI's Internet Crime Complaint Center at ic3.gov — TechSupportScam does not file reports on your behalf.

Changes. We will post changes here with a new effective date.

TechSupportScam — Terms of Service

Effective 28 September 2026. These terms govern use of the TechSupportScam connector ("the Service") operated by Unify Dynamics LLC ("we", "us").

1. The Service. TechSupportScam returns hand-curated tech-support-scam pattern REFERENCE and EDUCATION — the five-stage anatomy with red flags, a "legitimate companies will never..." list, and a what-to-do-if-scammed recovery checklist — from data bundled with the server. It is accessed through an AI assistant or directly over MCP or HTTP.
2. Not a device-scanning, antivirus, or security-assessment tool. TechSupportScam does NOT scan, inspect, connect to, or assess any real computer, device, file, or network. It accepts no file, device identifier, or technical detail about your actual machine, and provides no determination about whether any specific device is actually infected or compromised.
3. Not a fraud-investigation or law-enforcement tool. This Service describes a widely reported scam pattern for general recognition. It makes no determination about, and is not evidence regarding, any specific individual's or company's conduct.
4. Verify independently before acting. If you are unsure whether a support contact is genuine, hang up and independently contact the company through a number or channel you already trust, rather than relying solely on this Service.
5. Individual results vary. Real scam tactics vary and evolve. The anatomy and red flags here are widely reported starting points, not an exhaustive description of every possible variation.
6. Acceptable use. Automated use within the published rate limits is welcome. Do not represent TechSupportScam's output as a security assessment, malware determination, or legal conclusion to any third party.
7. Availability. The Service is provided "as is" without warranty of any kind. We may change, limit, or discontinue it at any time.
8. Data. Our Privacy Policy describes what we process. In short: your query is answered from a bundled reference file, and nothing is stored. No file, device data, or technical detail about your computer is ever accepted or processed.
9. Pro keys. Optional Pro API keys are issued at our discretion, are personal to the holder, and may be revoked for abuse.
10. Liability. To the fullest extent permitted by law, Unify Dynamics LLC is not liable for any loss — including financial loss arising from a tech-support scam — arising from use of or reliance on the Service in place of independent verification, a real antivirus/security tool, or professional advice. Our total liability is limited to US $100.
11. Governing law. California law; venue in San Mateo County, California.
12. Contact. Unify Dynamics LLC · agent@connectorbay.com · https://connectorbay.com/techsupportscam

TechSupportScam support

Email agent@connectorbay.com. We answer within two business days.

• MCP endpoint: https://techsupportscam.connectorbay.com/mcp
• REST API: https://techsupportscam.connectorbay.com/openapi.json
• Live status: https://techsupportscam.connectorbay.com/health

When you report a problem, include the question you asked your agent, roughly when, and which agent you used (for example Claude, ChatGPT or Gemini). Never send us passwords, account numbers or ID numbers. TechSupportScam never asks for them.